IBM QRadar L2 Engineer

Job Title IBM QRadar L2 Engineer Experience: 5+ Years Location: Pune Hinjewadi Phase 1 Shift: 247 Rotational Job Summary We are seeking an experienced IBM QRadar L2 Engineer with 5+ years of hands-on experience in QRadar Administration, Deployment, Log Source Integration, Use Case Development, and Log Optimization. The candidate will be responsible for implementing and managing QRadar SIEM environments, onboarding log sources, developing detection use cases, fine-tuning correlation rules, and supporting SOC operations. Key Responsibilities QRadar Administration & Management Administer and maintain IBM QRadar SIEM environments. Monitor system health, EPS/FPM utilization, storage, and performance. Perform QRadar upgrades, patching, backup, and restore activities. Troubleshoot QRadar offenses, services, and deployment issues. Manage users, roles, permissions, and security configurations. Installation & Deployment Install and configure QRadar All-in-One and Distributed Deployments. Deploy Event Collectors, Event Processors, and Flow Processors. Configure HA (High Availability) and Disaster Recovery environments. Perform post-installation validation and health checks. Log Source Integration & Optimization Integrate various security devices and applications with QRadar: Firewalls (FortiGate, Palo Alto, Check Point, Cisco ASA) EDR/XDR Solutions Windows & Linux Servers Active Directory Proxy & Web Security Solutions Cloud Platforms (Azure, AWS) Tune log sources to reduce noise and optimize EPS consumption. Troubleshoot log collection and parsing issues. Validate DSM mappings and custom log source integrations. Use Case Development Design and implement security monitoring use cases. Create and tune correlation rules, building blocks, and reference sets. Develop custom AQL searches and dashboards. Implement MITRE ATT&CK-based detection use cases. Reduce false positives through continuous tuning. SOC Support Support L1 analysts in offense investigation and incident response. Analyze security events and identify suspicious activities. Participate in threat hunting and security monitoring activities. Prepare RCA reports and technical documentation. Required Technical Skills IBM QRadar SIEM Administration QRadar Installation & Deployment Log Source Onboarding and Troubleshooting QRadar Correlation Rules & Use Case Development AQL Queries DSM and Log Parsing Windows Server Administration Linux (Red Hat/CentOS) Administration TCP/IP, DNS, Syslog, SNMP Incident Response and Security Monitoring MITRE ATT&CK Framework Preferred Skills QRadar Certified Associate/Admin Certification Experience with Sentinel, Defender XDR, Splunk, or ArcSight Scripting Knowledge (Python, PowerShell, Bash) SOAR Integration Experience Cloud Security Monitoring (Azure/AWS) Educational Qualification Bachelor's Degree in Computer Science, IT, Cyber Security, or related field. Security certifications preferred: IBM QRadar Certification CEH CompTIA Security+ CISSP (preferred) Experience 5+ years of Cyber Security/SOC experience. Minimum 3 years of hands-on experience with IBM QRadar. Experience in enterprise SIEM implementation and SOC operations. Key Competencies Strong troubleshooting and analytical skills. Excellent communication and documentation skills. Ability to work in rotational shifts and client-facing environments. Experience handling critical incidents and escalations. Job Title IBM QRadar L2 Engineer Experience: 5+ Years Location: Pune Hinjewadi Phase 1 Shift: 247 Rotational Job Summary We are seeking an experienced IBM QRadar L2 Engineer with 5+ years of hands-on experience in QRadar Administration, Deployment, Log Source Integration, Use Case Development, and Log Optimization. The candidate will be responsible for implementing and managing QRadar SIEM environments, onboarding log sources, developing detection use cases, fine-tuning correlation rules, and supporting SOC operations. Key Responsibilities QRadar Administration & Management Administer and maintain IBM QRadar SIEM environments. Monitor system health, EPS/FPM utilization, storage, and performance. Perform QRadar upgrades, patching, backup, and restore activities. Troubleshoot QRadar offenses, services, and deployment issues. Manage users, roles, permissions, and security configurations. Installation & Deployment Install and configure QRadar All-in-One and Distributed Deployments. Deploy Event Collectors, Event Processors, and Flow Processors. Configure HA (High Availability) and Disaster Recovery environments. Perform post-installation validation and health checks. Log Source Integration & Optimization Integrate various security devices and applications with QRadar: Firewalls (FortiGate, Palo Alto, Check Point, Cisco ASA) EDR/XDR Solutions Windows & Linux Servers Active Directory Proxy & Web Security Solutions Cloud Platforms (Azure, AWS) Tune log sources to reduce noise and optimize EPS consumption. Troubleshoot log collection and parsing issues.